Privacy policy

LeDuc Terms Checkbox ("the app") is a Shopify app made by LeDuc Systems LLC. This policy explains what data the app accesses and stores when a merchant installs it. Last updated November 4, 2026.

What the app accesses

• Checkout validations (write): to register the checkout rule that refuses an order without consent in Block mode, and to store its settings on it.
• Shop details: your store's domain, used to sign in to the app.

The app does not access orders, customers, products, payments or analytics. Your checkbox settings are saved in an app metafield in your own Shopify store.

What the app stores on our servers

Only the Shopify session data needed to keep you signed in to the app: your shop domain, an access token issued by Shopify, and the granted permission scopes, plus a few setup flags for your store (for example whether you've saved settings).

Shopper data

None is stored by us. When a shopper ticks a box, the storefront script writes the consent (for example "Yes, version 2, 2026-11-04 14:22 UTC") to the shopper's cart as a cart attribute. It is saved on the merchant's own order in Shopify, under Additional details, and nowhere else. The script sends nothing to our servers, sets no cookies and does no tracking. At checkout, Shopify runs the app's rule on the cart's attributes; the app never sees who the shopper is.

Sharing

We don't sell or share data. Our server is hosted by Hetzner Online in Germany and only runs the app.

Retention and deletion

When you uninstall the app, your session data is deleted right away. Shopify then sends a shop/redact request 48 hours later, and we delete anything remaining for your store. Customer data requests and customer redaction requests are answered as having no data, because the app stores none. Consent lines already saved on your orders belong to you and stay in your store.

Your rights and contact

To ask about or delete your data, email tyler@leducsystems.com or write to LeDuc Systems LLC, 17617 N 9th St #3031, Phoenix, AZ 85022, USA.